Senior Security Engineer

Hamilton Barnes ?; United Kingdom; Remote; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Remote work

Job summary

Hamilton Barnes is seeking a Senior Security Engineer to own security across the business, with a startup mindset. This fully remote role offers £85,000–£110,000 and comprehensive health benefits.

You will design and implement security controls across applications, infrastructure and internal systems, conduct penetration tests, and help teams ship features securely. Collaboration with leadership is essential to balance risk and speed.

Qualifications

• Proven hands-on security engineering experience across apps, infra and internal systems.
• Strong knowledge of application security and OWASP vulnerabilities.
• Experience with penetration testing and vulnerability assessments across networks and web apps.
• Experience managing IAM, RBAC, MFA, SSO and least-privilege policies.
• Solid Linux, networking, Docker and cloud security fundamentals.

Responsibilities

• Own and improve security across applications, infrastructure, internal systems and operations.
• Review code for vulnerabilities and work with engineers to fix them.
• Run hands-on penetration tests and vulnerability assessments across web apps, APIs, networks and infrastructure.
• Secure internal and external APIs with proper authentication and credential management.
• Own identity and access management including RBAC, MFA, SSO and least privilege.

Skills

Security engineering

Application security

Infrastructure security

Penetration testing

Vulnerability assessments

OWASP

Tools

Docker

CI/CD tools

API security tools

Job description

Senior Security Engineer | £85,000–£110,000 | Remote

Do you want to own security across a whole business, not just one corner of it? A fast-growing game server hosting company that powers multiplayer communities around the world is hiring its Senior Security Engineer, and this is a role for someone with a real startup mindset.

You won’t just write the policy and hand it to someone else. You’ll come up with the ideas, design the processes and then roll up your sleeves to make them happen yourself, whether that’s fixing a vulnerability in the code, hardening infrastructure or running a social engineering test on the team. You’ll work directly with engineering and leadership, with the freedom to decide what matters most and the responsibility to see it through.

What’s in it for you:

• Real ownership from day one. You’ll set the security agenda across applications, infrastructure, internal systems and the people who use them, without layers of approval in the way.
• Variety every week. One day you’re reviewing code, the next you’re running a penetration test, securing an internal tool or training colleagues to spot phishing. No two weeks look the same.
• Work that matters, at scale. You’ll protect a platform that players and customers rely on around the clock, in a business that moves quickly and values practical security over red tape.

What you’ll be doing:

• Owning and improving security across applications, infrastructure, internal systems and business operations
• Reviewing code for vulnerabilities and working directly with engineers to fix them
• Running hands-on penetration tests and vulnerability assessments across web apps, APIs, networks and infrastructure
• Securing internal and external APIs with proper authentication, authorisation and credential management
• Owning identity and access management, including role-based access, least privilege and regular access audits
• Setting practical security standards for internal tools, third-party services, cloud and production infrastructure
• Leading security awareness, including phishing simulations, social engineering tests and training
• Spotting risks in everyday workflows and putting technical or procedural safeguards in place
• Building and running security monitoring, vulnerability scanning, threat detection and incident response
• Adding automated security checks into development, including code scanning, dependency auditing and CI/CD controls

What we’re looking for:

• A startup mindset. You’re happy wearing many hats, you take ownership of problems outside a tidy job description, and you thrive when priorities change quickly.
• Ideas and execution. You can design the security strategy and processes, then implement them yourself, from development and infrastructure through to social engineering.
• Strong experience in security engineering, application security or infrastructure security
• A self-starter who can set priorities and drive projects from first idea to finished fix
• A hands-on approach: you’re comfortable investigating issues, writing code and configuring systems
• Strong knowledge of application security, secure coding and OWASP vulnerabilities
• Experience with penetration testing, vulnerability assessments and security testing tools
• A strong grasp of API security, OAuth, access tokens and credential management
• Experience managing IAM, RBAC, MFA, SSO and least-privilege policies
• Solid Linux, networking, Docker and cloud security fundamentals
• Experience securing production applications, databases, internal tools and cloud environments
• Familiarity with SAST, DAST, dependency scanning and secrets detection

This is a fully remote role paying £85,000–£110,000 basic, with comprehensive health benefits including medical, dental and vision insurance.